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" The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- tf NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.O. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )□ Responsive to comnnunication(s) filed on . 

2a)n This action is FINAL. 2b)l3 This action is non-final. 

3) D Since this application is in condition for allowance except for fomial matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) 0 Claim(s) is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

Q)M Claim(s)ii30 is/are rejected. 

Claim(s) is/are objected to, 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 185(a). 
Replacement drawing sheet(s) including the connection is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action orfonn PTO-152. 
Priority under 35 U.S.C. §§119 and 120 

12) n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)nAII b)n Some*c)n None of: 

Certified copies of the priority documents have been received. 
Certified copies of the priority documents have been received in Application No. . 



ID 

3.n 



Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

13) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application) 

since a specific reference was included in the first sentence of the specification or in an Application Data Sheet. 
37 CFR 1.78. 

a) □ The translation of the foreign language provisional application has been received. 

14) n Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1.78. 



Attachment(s) 

1) 13 Notice of References Cited (PTO-892) 

2) ED Notice of Draflsperson's Patent Drawing Review (PTO-948) 

3) ^ Information Disclosure Statement(s) (PTO-1449) Paper No(s) 4 . 



4) n Interview Sunnmary (PTO-413) Paper No(s). 

5) ED Notice of Informal Patent Application (PTO-152) 

6) □ Other: 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 11-03) 



Office Action Summary 



Part of Paper No. 6 





Application/Control Number: 09/475,062 
Art Unit: 2132 



Page 2 



DETAILED ACTION 



Claim Rejections - 35 USC § 102 



1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AlPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AlPA (pre-AlPA 35 U.S.C. 102(e)). 

2. Claims 1-30 are rejected under 35 U.S.C. 102(e) as being anticipated by Howard 
et al. U.S. Patent No. 6,584,505. Referring to claims 1,13,24 Howard et al. discloses a 
system and method for web server user authentication comprising: receiving a request 
to connect the valid user to a web server, creating a user password cookie using a 
shared secret key and transmitting the user password cookie in response to the request 
in Column 3, lines 44-61, Column 7, lines 15-43. 

Referring to claims 2,14, and 26, Howard et al. discloses the claimed limitation of 
reading a user credential cookie, requesting a user ID and password, receiving the user 



Application/Control Number: 09/475,062 Page 3 

Art Unit: 2132 

ID and password, and validating the user's identity in Column 7, lines 54-67, Colunnn 8, 
lines 1-7. 

Referring to claims 3 and 15, Howard et al. discloses the claimed limitation of 
authenticating the user ID and password with the user profile information stored within 
the cookie in Column 6, lines 57-59, 63-66, Column 7, lines 12-16, 22-23. 
Referring to claims 4 and 16, Howard et al. discloses the claimed limitation of an 
operating system in Figure 2. 

Referring to claims 5,7,17, 23,and 29, Howard et al. discloses the claimed limitation of 
combining the user ID and password with a time stamp (cookie) and encrypting the 
cookie using a key in Column 7, lines 19-43. 

Referring to claims 6 and 18, Howard et al. discloses the claimed limitation of obtaining 
the user password cookie, verifying that the user password cookie is valid, and updating 
the user password cookie using the key in Column 7, lines 54-67, Column 8, lines 1-7. 
Referring to claims 8 and 28, Howard et al, discloses the claimed limitation of having a 
group of web servers sharing a key in Column 7, lines 35-53. 
Referring to claims 9 and 19, Howard et al. discloses the claimed limitation of 
authenticating a second valid user requesting access to the web server in Column 3, 
lines 34-39. According to the invention, it is implied that multiple users can be 
authenticated when requesting access to the web server. 

Referring to claims 10-12, 20-22 and 30 are rejected under Claim 1 . According to the 
invention, multiple users can be authenticated and provided access to multiple servers 
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in Column 2, lines 16-26, group of web servers in Column 3, lines 17-20, updating the 
user password cookie in Column 7, lines 25-26. 

Referring to claim 25, Howard et al. discloses the claimed limitation of receiving a 
request to connect to a user to a web server, determining if the user is valid, if not, then 
the user is denied, if valid, then if a valid user password cookie exists, then updating the 
user password cookie using a key, if no cookie exists, then generating a user password 
cookie, transmitting the user password cookie to the user and connecting the web 
server to the user in Column 6, lines 53-67, Column 7, lines 1-30. 
Referring to claim 27, Howard et al, discloses the claimed limitation of obtaining the 
user password cookie, verifying that the user password cookie is valid, if the user 
password cookie is valid, then the user is valid, if the user password cookie is not valid, 
then the user is not valid in Column 8, lines 66-67, Column 9, lines 1-15. 

Conclusion 

3. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Shi et al. U.S. Patent No. 5,875,296 discloses a distributed file 
system web server user authentication with cookies. Broadhurst et al. U.S. Patent No. 
6,205,480 discloses a system and method for web server user authentication. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 703- 
305-8293. The examiner can normally be reached on Mon - Thu 7:00 - 5:00 pm; off 
every Fri. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 703-305-1830. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 





December 12, 2003 



GILBERTO BARRON 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTEH 2iC0 



